---
name: Update lockfiles when dependencies change is merged

on:
  pull_request:
    branches: [main]

concurrency:
  group: ${{ github.ref }}-${{ github.workflow }}
  cancel-in-progress: true

jobs:
  update-lockfiles:
    name: update-lockfiles
    runs-on: arc-runner-set
    if: |
      contains(github.event.pull_request.title, 'chore(deps)') ||
      contains(github.event.pull_request.title, 'fix(deps)')
    outputs:
      AFFECTED_PROJECTS: ${{ steps.get_affected_projects.outputs.AFFECTED_PROJECTS }}
      CHANGE_BASE: ${{ steps.set-change-base.outputs.CHANGE_BASE }}
    env:
      AGENT_TOOLSDIRECTORY: /opt/hostedtoolcache
    steps:
      - name: Checkout Code
        uses: actions/checkout@v4
        with:
          token: ${{ secrets.GH_ACCESS_TOKEN }}
          fetch-depth: 0

      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Initialize Pants
        uses: pantsbuild/actions/init-pants@main
        with:
          gha-cache-key: cache0-py3.12

      - name: Update lockfiles
        run: |
          pants generate-lockfiles

      - name: Commit changes
        run: |
          git switch ${GITHUB_HEAD_REF}
          CHANGES_NEEDED=$(git status --porcelain | grep "python/default.lock" | wc -l)
          if [ "${CHANGES_NEEDED}" -lt 1 ]; then
            echo "No changes to lockfile - not pushing change"
          else
            git config --global user.name "github-actionspantslockfilebot"
            git config --global user.email "<mailto:github-actionsactionspantslockfilebot@users.noreply.github.com|github-actionsactionspantslockfilebot@users.noreply.github.com>"
            git add 3rdparty/python/default.lock
            git commit -m "Update python lockfile with dependency change"
            git push origin HEAD:${GITHUB_HEAD_REF}
          fi